Quick overview
Job description
Who you'll be:
The Enterprise Logging Solution (ELS)/SIEM Engineer supports the Agency's centralized security monitoring and audit/reporting capabilities. This senior-level role involves analyzing, developing, and testing ELS/SIEM enhancements, integrating streaming-ingestion architecture into cloud and on-premise environments, and onboarding new systems. The engineer will also create dashboards for various stakeholders and maintain a Master Project Schedule. Responsibilities include tuning correlation rules, maintaining whitelists/blacklists, and integrating ML/AI capabilities. Candidates must possess a TS/SCI clearance due to elevated-access programs.
What you'll do:
- Analyze, develop, and test proposed ELS/SIEM enhancements using vendor/industry best practices.
- Assess current capabilities against security/logging regulations and perform gap analyses.
- Migrate/implement ELS/SIEM architecture in cloud and on-premise environments.
- Architect and integrate streaming processing solutions for data onboarding/ingestion.
- Develop implementation plans and present change requests at Change Control Board meetings.
- Onboard new systems into ELS/SIEM, including data design requirements and ingestion testing.
- Create dashboards for System Owners, ISSM/ISSO, executive management, and developers.
- Maintain the SIEM's collection of IDS, firewall, proxy, DLP, antivirus, cloud log, and vulnerability scanner data sources.
- Develop correlation rules, signatures, and risk-based scoring enhancements.
- Develop, deploy, and integrate ML and AI into the Agency's ELS/SIEM.
- Provide user support for ELS/SIEM dashboard use and respond to system outages/data-feed issues.
What you need:
- Minimum 5 years of experience in system administration, database administration, network engineering, software engineering, or software development with a concentration in Cyber Security; or, with a bachelor's degree in Computer Science, Engineering, Information Technology, Cybersecurity, or a related field, 3 years of such experience.
- TS/SCI clearance is mandatory.
Nice to have:
- Splunk Certified Admin
As required by local law, Accenture Federal Services provides reasonable ranges of compensation for hired roles based on labor costs in the states of California, Colorado, Connecticut, Hawaii, Illinois, Maine, Maryland, Massachusetts, Minnesota, New Jersey, New York, Ohio, Vermont, Virginia, Washington, and the District of Columbia. The base pay range for this position in these locations is shown below. Compensation for roles at Accenture Federal Services varies depending on a wide array of factors, including but not limited to office location, role, skill set, and level of experience. Accenture Federal Services offers a wide variety of benefits. You can find more information on benefits here. We accept applications on an on-going basis and there is no fixed deadline to apply.
Similar jobs
- LT

Information Security AdvisorRecently posted Auto Apply
Lyra Technology Group · Brentwood · Hybrid 🇺🇸
OnboardingComplianceDue Diligence+5Salary not listed - TT
Senior Security EngineerRecently posted Auto Apply
True Talent Solutions Partners · San Francisco · On-site 🇺🇸
GCPAWSSOC 2+5TechnologySalary not listed - CI
Senior Security EngineerRecently posted Auto Apply
Citian · Washington · Hybrid 🇺🇸
AWSEncryptionMFA+12TechnologySalary not listed - RA

Security Lead, Product and Infrastructure (InfoSec)Recently posted Auto Apply
River AI Inc. · Palo Alto · Hybrid 🇺🇸
SOC 2ComplianceDeep Learning+2$200k - $420k/yr - CO
Cybersecurity Engineer (Cloud Security)Recently posted Auto Apply
City of New York · New York City, NY · On-site 🇺🇸
Network AdministrationTechnologySalary not listed - CO
Cybersecurity Engineer (ICS/OT Security)Recently posted Auto Apply
City of New York · New York City, NY · On-site 🇺🇸
TechnologySalary not listed - CO
Cybersecurity Engineer (Application Security)Recently posted Auto Apply
City of New York · New York City, NY · On-site 🇺🇸
OWASPTechnologySalary not listed - CO
Cybersecurity Engineer (Test & Evaluation)Recently posted Auto Apply
City of New York · Brooklyn, NY · On-site 🇺🇸
Penetration TestingTechnologySalary not listed - CO
Cybersecurity Engineer (Network Security)Recently posted Auto Apply
City of New York · New York City, NY · On-site 🇺🇸
TechnologySalary not listed - CO
Cybersecurity Analyst (Cyber Threat Intel)Recently posted Auto Apply
City of New York · New York City, NY · On-site 🇺🇸
TechnologySalary not listed - AB

IAM Federation Services (Okta) Engineer Auto Apply
AbbVie · North Chicago, IL · Remote 🇺🇸
Engineering$84.5k - $162k/yr - AB

Global Security Operations Center 2nd Shift Supervisor Auto Apply
AbbVie · North Chicago, IL · On-site 🇺🇸
Technology$65.5k - $125.5k/yr